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Abstract 


An inv6stigation was made into certain methods of reliability anal- 
ysis that are particularly suitable for complex mechanisms, or systems, 
in which there are many interactions {electrical, chemical, mechanical, etc.). 
The methods developed here were intended to assist in the design of such 
mechanisms, especially for analysis of failure sensitivity to parameter 
variations and for estimating reliability where extensive and meaningful 
life-testing Is not feasible. The system is modeled by a network of 
i nterconnected nodes. Each node, is a state or mode of operation, or is 

an input or output node, and the branches (interconnection paths) are 

! 

Interactions (in many cases, failure mechanisms). Each interaction has 
a probability and a time distribution. An interactive matrix is formed, 
the rows and columns of which are the nodes. The probability of going 
from one node to another, and the number of m-element paths between the 
nodes, is calculated by application of matrix multiplication and summation. 
Conventional failure analyses cannot as easily handle these interactive 
problems. The network, with its probabilistic and time-dependent paths 
is also analyzed for reliability and failure nodes by a Monte Carlo, 

GERTS computer-simulation of system performance. Applications 'of these 
methods are made primarily to a high pressure, constrained bellows for 
the pump discharge line of a NERVA rocket engine, and secondarily to a 
railroad car wheel. 
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I. Introduction 


NASA's missions require sophisticated equipment of extraordinarily 
high reliability. The equipment functions are complex, yet the equip- 
ment must be of minimum size and weight, and often must operate in unusual 
environments. Since the missions are relatively few in number, expensive, 
and may involve human life, equipment failure can be disasterous. 

Component or system failure almost always begins with the “failure", 
or abnormal state, of a material. This abnormal state may arise in a 
number of ways: inadequate design (misuse of materials), overstressing 

(mechanical thermal, electrical), poorly executed fabrication, or defi- 
cient inspection (either in practice or in principle). 

Achievement of high reliability, and good estimates of reliability, 
depend upon a knowledge of the response of materials to their environ- 
ment, especially with respect to the creation of abnormal (undesirable) 
states in the materials. Failure data exist for specific materials in 
certain known failure modes, and design studies take these particular 
failure states into account, often in an arbitrary manner. 

Many books and articles have been published dealing with the estima- 
tion of reliability. A common method for determining reliability is to 
test the component or system under service conditions in statistically 
significant quantities and for a long enough time to accumulate date for 
estimating failure rates at an agreed-upon confidence level. The problem' 
often is the necessity for lengthy times, and so one usually resorts to 
accelerated life tests that are based upon a known or reasonable correlation 
with normal service conditions. In many cases, however, it Is not feasible 
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to test significant quantities of the component or system. Here, then, 
one is thrown back to estimation schemes. These cannot be better than 
the input data or the ability of the engineer to identify and quantify 
the many failure possibilities. The engineer has two general reliability 
analysis schemes to help him find a reliability function: fault free 

analysis, and failure mode analysis^. In either scheme he will use em- 
pirical data and a knowledge of the physics of failure to identify various 
failure mechanisms and their dependence on environmental variables. The 
critical assumption usually made in these schemes is the independence of 
the failures of the component units that make up the system. 

The purpose of the present work was to develop a method of reli- 
ability analysis which could be applied to a complex mechanism in which 
there were many electrical, mechanical and chemical interactions . In 
particular, the mechanism of primary interest was a component of the 
iNERVA nuclear rocket. Traditional mathematical reliability analysis 
fails for such an environment because of the complexity of the interactions, 
while life testing is infeasible. The reliability techniques developed 
in this work were intended to assist in the design of such complex mech- 
anisms, especially for sensitivity analysis in the initial design and for 
estimating the reliability in the final design. 

These techniques can also lead to both the discovery and quantification 
of failure mechanisms by an in-depth examination of a specific component and 
its interaction with the environment, emphasis being placed on the materials 
states and behavior with time. 

The analysis consists of a thorough examination of the response of the 
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component materials to their environment. Response and environment are 
interpreted in a broad sense. Response is here meant to be an unusual 
or abnormal state of the material. This state may or may not be reversible 
or permanent. It need not be a failure state in itself, but it could lead 
to "failure" of the material or of another material, or of the component. 
Environment is the totality of parameters acting upon the material, and 
include those of chemical, mechanical, heat, and nuclear origin. In 
certain cases, electric or magnetic fields might also be included. 

The examination of response to environment is, therefore, a study 
of material interactions. The interactions will include feedback and 
cyclical effects, processes involving several steps (or mechanisms) , and 
synergistic processes (i.e., simultaneous interactions producing a response 
that is far greater than either interaction operating alone). Many of the 
interactions will be those usually classed as failure mechanisms, that is, 
interactions leading directly to catastrophic failure. However, other 
interactions will lead to more subtle, less direct failure possibilities 
involving material changes that, in time, will produce failure. Note that 
the environment itself may be modified by certain material changes; for 
example, a change in elastic modulus of one material could alter the 
"environment" forces or frequency of forces on another material. 

As an aid in the examination we will use methods such as GERT, 

Monte Carlo simulation for analysis of a network representing the inter- 
active mechanisms and failure modes of the component or system. This 
network will also help identify less obvious or complicated failure modes 
and sequences. 
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n. Description of NERVA Component 


The reMabillty techniques investigated in this program were 
applied to a possible component of a NERVA engine » This component, 
selected by NASA, was a high pressure, internally restrained bellows 
to be used in the pump discharge line. A sketch of the component 
is shown in Fig. 1. The flexibility of the bellows provides for 
articulation of the engine with respect to the rocket, and the flow 
of liquid hydrogen propellant from pump to reactor takes place 
through the bellows. Two internal tripods supporting a ball and ' 
socket, respectively, prevent extension of the bellows. 

This component must operate in both earth and space environments, 
at temperatures of -423°F, and at hydrogen pressures of 1040 psia. 
Calculations of the stresses that would occur on this component had 
been made by engineers at the Aerojet-General Corporation, Sacramento, 
California. It was also known that the hydrogen stream would carry 
with it a quantity of particulate matter. A useful operating life of 
ten hours was expected intermittently for 60 cycles over about a month. 

For the purposes of this investigation a knowledge of the precise 
operating stresses and environmental conditions were not necessary. 
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III. Analytic Techniques 

In devices as complex as a Nerva Rocket components of the system 
can often operate in one of several states or modes, one or several of 
which may effect the reliability of other elements. As ah example, 
consider a support rib in a group of three which are supporting another 
element (Fig. 1). If any one of the ribs should yield, the device 
itself does not fail but the new mode of operation (one support rib 
having yielded) will now have an effect on the reliability of the 
entire device. Analyzing the reliability of the system by conventional 
reliability mathematics is not feasible either in the early stages of 
the design or in the later stages of design (when more information is 
available from the system's performance). In our approach a complete 
enumeration was made of all components in the system and their various 
modes of operation. Next all exogenous variables which could affect 
the reliability of this system were enumerated. Examples of such 
variables are heat, vibrations, moisture, foreign particles, etc. 

After listing the modes of operation and the exogenous variables, 
a matrix was constructed which indicated whether any particular mode 
of operation could cause some other component and/or itself to operate 
in a new mode at a later time. This matrix is somewhat similar to the 
classical "fault^tree" analysis (fault trees, however, are more graphic 
than analytic and do not show possible feedback). This matrix was then 
raised to higher and higher powers until the product finally vanished. 
The elements of the matrix that is formed from the sum of all of the 
product matrices indicate the number ,of cause-effect paths from any 
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other single mode of operation. 

In addition, the original matrix also served as the basis for a Monte 
Carlo simulation. In the simulation, account was taken of the probability 
that any component will change its mode of operation as we 1 1 as the time it 
will take for this change of mode to occur. The simulation was carried out 
using the GERTS program which was developed for NASA in 1968.^ 

GERTS is a general simulation program for stochastic networks. The 
branches or arcs of the network correspond to activities or processes and 
the nodes of the network correspond to the end of one or a set of activities 
and the beginning of other activities. The reliability of a system can be 
modeled as a network wherein the interaction (possible failure) mechanisms 
are represented as branches, and nodes represent the modes of operation (or 
states) of the system upon the completion of an interaction mechanism. Each 
branch is characterized by the probability that the mechanism will be set 
into motion and the probability distribution of the length of time until the 
mechanism is completed, or has possibly reached a point at which a new mode 
of operation occurs. The network contains two special nodes: sink nodes 

and source nodes. The source nodes represent both the initial state of the 
system and the environmental factors which give rise to failure mechanisms. 
The sink nodes represent the events of mission success or mission failure. 

A more complete and detailed description of GERTS is contained in Appendix A, 


Application of Reliability Analysis to NERVA Bellows 

As a vehicle for demonstrating the reliability analysis techniques 
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developed in this research, a constrained bellows for the nuclear rocket 
was selected (Fig. 1), Table la lists the components of the mechanism. 
Table lb lists various conditions and Table Ic lists pertinent exogenous 
variables. The matrix of component states and exogenous variables is 59 
by 59. A component state represents the combination of a component plus 
a condition to give a node in the graphical network; thus, 2A represents 
an inlet support ring in the yielded condition. Table 2a lists the nodes 
(row or columns). All the matrix elements (interactions) are zero except 
those listed in Table 2b. 

A simpler version of the bellows was also considered which allows 
closer observation of the reliability techniques developed. Figure 2 
shows graphically the relationship between the variables in this smaller 
system. The relationships between modes of operation and exogenous 
variables can be represented by an n x n matrix. If there is a direct 
one step cause-effect interaction betwen two variables or modes of 
operation a one is shown, otherwise a zero. That is: 

®ij ~ ^ state i can lead directly in one step to state j. 

= 0 otherwise. 

This matrix has the property that when it is raised to the power 
the elements show the number of paths between i and j containing exactly 
m branches. Consider the 4 state system: 
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J 2 3 4 

1 0 110 

2 0 0 1 1 

A = 

3 0 0 0 1 

4 0 0 0 0 

0 0 0 1 

= 0 0 0 0 

0 '0 0 0 


12 3 4 

1 0 0 12 

« 2 0 0 0 1 

A^ = 

3 0 0 0 0 

4 0 0 0 0 

0 0 0 0 

4 

A = 0 0 0 0 

0 0 0 0 


Thus, there is one 2-branch path between states 1 and 3, one 2-branch path 
between states 2 and 4, two 2-branch paths between states 1 and 4 and 
oen 3-branch path between states 1 and 4. If we weight the respective 
branches by the probabilities that each may be taken we can repeat the 
above procedure and will nowhave the probability any given path is com- 
pleted. This assumes, of course, that the paths are independent. Figure 
3 shows the matrix of relationships for the small system considered. This 
maxtrix was raised to the seventh power and all terms vanished. The pro- 
duct matrices were summed and are shown in Fig. 4. From this figure it 
can be seen that rib yielding can lead to inlet support ring cracking by 
three separate paths. This indicates that there is high possibility of 
interaction between the rib yield state and the inlet-support ring 
crack. The matrices can also be used to examine the lengths of the paths. 
Further, a probability for each interaction was inserted in place of the 

original element 0 or 1 , and the elements of the product matrix then gave 
the probability of a given interaction between two states. In odder to 
incorporate the effect of time In the failure analysis a time distribution 
was assigned to each interaction. 
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A Monte Carlo, GERT, simulation was performed on this smaller matrix 
and the results of 5000 mission simulations appear in Table 3. Table 3 
shows the probability of failure nodes (2C, 17C and 17D) being realized 
along with the relative time before failure. The time required for a 
state to change to another state was estimated to be either instantaneous, 
intermediate (uniformly distributed between 1 and 5) or long (uniformly 
distribued between 5 and 10). These same distributions were subsequently 
used in the GERT simulation of the large network. It was assumed that 
the length of the mission was 10. The probability that a state would change 
was assumed to be either .05 or .005. These estimates were subsequently 
used in the GERT simulation of the large network. Based on the above prob- 
abilities and times, the reliability of the bellows was .9688. Actual data 
would need to be gathered experimentally or by physics-of-failure models. 
This particular analysis is for illustration only. 

The analysis of the small matrix version of the bellows points out 
several interesting characteristics of the system reliability. Looking 
first at the "Total Matrix," Fig. 4, it can be seen that there is a large 
number (32) of paths which can lead to state 2C - inlet support ring 
fractured. At the same time it can be seen that there are only 9 paths 
which will lead to state 17C - bellows fracture. This would indicate - 
that the bellows is less likely to fall from a rupture than it is from an 
inlet ring fracture. When each branch is weighted by the probability of 
the associated failure mechanism the probability of an inlet ring fracture 
is approximately .001 while the probability of a bellows rupture is .00007. 
When the time character of the failure mechanism is introduced and a GERT 
simulation is performed on the same network, the bellows failed 4 times in 
5000 simulations due to an inlet ring support fracture and failed 52 times 
due to a bellows fracture (see Table 3). Here it may be seen that these 
models provide a powerful tool for determining the elements in the system 
which are most likely to cause failure of the system. 
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A similar analysis was performed on the larger matrix. The results of the 
simulation analysis are shown in Table 4. The difference between the 
simulation analysis and the matrix analysis is primarily due to incorporation 
of the distribution in time for the interaction mechanisms. When the matrix 
analysis of the large system was performed (without probabilities) the number 
of paths betwen external causes and failures became alarmingly large. It was 
not determined whether this was due to a truly large number of paths or to a 
topological inconsistency in the network or to a bona fide loop. A loop 
could lead to positive feed back and thus to sustained oscillations of the 
interactive mechanisms. This is an important part of the matrix analysis 
but the scope of this work did not permit the analysis of techniques for 
detecting loops. In the GERT simulation of the large system it became 
apparent that the system would most likely fail because of a bellows rupture 
(Table 4). The mechanisms which lead to a bellows rupture were traced in 
the simulation and are shown in Table 5. The analysis suggests that pro- 
tection of the bellows is an important design consideration. 
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IV. Application to Other Problems 


A small investigation was made into the application of the concepts 
and methods described above to another mechanical system. A system was 
sought which was simple and yet possessed the characteristics of interaction 
among system variables and multiple fai lure modes. The railroad wheel was 
chosen because of recent renewed interest in railway safety and because the 
complexity of the service conditions of railroad wheels made them an 
attractive candidate. 

There are numerous reports in the literature of work related to isolated 
aspects of railroad wheel service conditions and wheel failures. But there 
has been no work reported on the effect of combined service conditions on all 
failure modes. Novak and Eck^ have calculated' the wheel stresses caused by 
combined simulated thermal an.d mechanical service loads, Bruner, et al^ 
have reported the effects of design variation and service stresses in railroad 
wheels and an analysis of the residual thermal and loading stresses together 
with their relation to fatigue damage. A study of the tread temperature 
during braking in grade operation has been reported by Cabbie^. Measurement 
and analysis of the lateral, vertical and contact wheel - rail forces has 
been performed by Martin and Hay^ and Peterson, Freeman and Wandrisco^. The 
information contained in these studies has been useful in our effort to construct 
an overall loading > response picture of the wheel. 

Since the objective of the study of the wheel was to demonstrate the 
applicability of the failure mode analysis described previously to a dif- 
ferent mechanical system it was decided to make the system as simple as possible 
without sacrificing the interactive features. To reduce the number of components 
in the system the wheel was studied without consideration of the axle and the 
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bearings. The terminology used to describe components and failure modes 
was taken from the Wheel and Axle Manual and the Manual of Standards and 
Recommended Practices of the American Association of Railroads. 

Only the surface (and immediate subsurface) of the wheel rim was 
considered. The interactive matrix describing this system” is discussed 
below. 

The material properties of the wheel that were considered are yield 
strength, Brinell Hardness and fatigue limit. The service loading was 
attributed to the mechanical loading (car load, track bed, rocking) and to 
the temperature changes resulting from braking. These service inputs are 
then expressed as a stress state which, when combined with material pro- 
perties, produce mechanical effects such as elastic and plastic deformation, 
crack growth and wear. The thermal history causes, in addition, annealing 
effects which show up in the magnitude of yield stress and hardness. An 
additional effect of the deformation of the wheel is a residual stress field 
which must be continuously added to the loading and thermal stresses. 

When the radial crack growth resulting from the net circumferential 
tension stress exceeds a critical value, the failure state of thermal 
cracl^ is reached. When the plastic flow because of high shear stress 
and low yield stress becomes excessive, the failure state of built-up 
tre^ is obtained. And when the subsurface circumferential crack length 
exceeds a critical value the failure state of shelled tread is reached. 

The interactions of these variables are shown in matrix form in Fig, 5. 

The columns are considered to be the causes and the rows to be the effects. 
The zero elements of the matrix indicate no interaction and the unitary 
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elements denote an interaction between system variables. 

Time did not permit further elaboration of this model; however, 
the following paragraphs indicate the approach that would have been taken. 

The simulation scheme was to have involved simultaneous equations 
in which the matrix elements were coefficients relating variables (independent). 
The coefficients may be constant, or functions selected to model the physical 
interaction. For example, the fourth row of the matrix indicates: 

H H(T,a) 

Many of these functions, such as the relation between loading situations 
and the stress in the wheel , would be in tabular form for the computer. The 
sourcesof these functions come both from our understanding of the specific 
interaction and from data or analysis in the literature. 

Computer simulation would then be conducted by programming the stress 
(load) and temperature so as to simulate typical service conditions. References 
(3)and (7) would have been helpful in this programming. The equations were to 
be solved at regular time intervals. The values of the row variables obtained 
from the first interval solutions would be used as the column variables for 
the second interval, etc. 
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V. Conclusions 


The physical state or mode of operation of a complex system, or 
component, having interdependent changes may be modeled by a network 
of interconnected nodes. Each node is a state or mode of operation, 
or is an input or output node, and the branches (interconnection paths) 
are interactions (in many cases, failure mechanisms). Each interaction 
has a probability and a time distribution . An interactive matrix may 
be formed, the rows and columns of which are the modes. The probability 
of going from one node to another may be calculated by application of 
matrix multiplication. The elements of the matrix which is the sum of 
the product matrices are either the number of paths between the nodes 
or the probability of occurrence of that interaction. Conventional 
failure-mode or fault tree analyses cannot easily handle the inter- 
active problem, whereas the matrix method presented here can do so 
quantitatively and easily. 

The network, with its probabilistic and time-dependent paths, can 
also be used for a Monte Carlo, GERTS, computer-simulation of system 
performance. This simulation can produce reliability estimates, can show 
the probabilities of the various failure modes, and can show the sensi- 
tivity of the reliability and failure modes to changes in probability 
and time functions. This last feature is especially valuable when in- 
sufficient data is available for some of the interactions. 

Although the above methods (matrix multiplication and probabi 1 istic 
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Monte Carlo simulation) are more demanding of knowledge about materials, 
system, and failure-mechanisms than conventional ways for estimating 
reliability, the above methods yield more information. They also lead the 
engineer into a deeper analysis of the system, which may result in dis- 
covery of new failure modes, especially for interactive systems, and a 
consequent greater reliability. 


I 
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TABLE la 


Components for the Constrained Bellows 

1 . inlet pipe 

2. inlet support ring 

3. rib weld to inlet support ring 

4. rib 

5. rib weld to socket support 

6. socket support 

7 . socket 

8. ball -socket interface 

9. ball 

10. ball support 

11. rib weld to ball support 

12. rib 

13. rib weld to outlet support ring 

14. outlet support ring 

15. outlet pipe 

16. bellows weld to inlet support 

17. bellows 

18. bellows weld to outlet support 
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TABLE lb 


Conditions for the Constrained Bellows 


A. yield 

B. crack 

C. fracture (broken) 

D. rupture 

E. dent 

F. gall 

G. wear 

H. cavitation 

I. welded 

J. flow obstruction 

K. good 

L. loose 
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TABLE Ic 


inputs for the Constrained Bellows 

19. vibration, external 

20. vibration, flow 

21. pressure LH 2 

22. pressure variations LH 2 

23. temperature 

24. temperature variations 

25. radiation 

26. LHp 

27. material microstructure 

28. material composition 

29. weld defect 

30. Improper assembly 

31. projectile, internal (large and small) 

32. projectile, external 

33. vacuum 

34. air 

35. moisture 

36. normal operating stresses 

37. angulation 

38 V abnormal stresses ■ 

39. starting shock 

40. stopping shock 
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TABLE 2A 

Nodes (Row & Columns) Of Large Matrix 


NODE 

DESCRIPTION 

20 

Vibration External 

21 

Vibration - Flow 

22 

Pressure LHZ 

23 

Pressure Var. LHZ 

25 

Temperature Var. 

31 

Improper Assembly 

32 

Projectile, Internal 

33 

Projectile, External 

38 

Angulation 

39 

Abnormal Stress 

40 

Starting Shock 

41 

Stopping Shock 

42 

Cavitation 

2A 

Inlet Support Ring: 

2B 

Inlet Support Ring: 

2C 

Inlet Support Ring: 

2E 

Inlet Support Ring: 

20 

Inlet Support Ring: 

' 2K 

Inlet Support Ring: 

3A 

Rib Weld: Yielded 

3B 

Rib Weld: Cracked 

3C 

Rib Weld: Fractured 

3K 

Rib Weld: Good 

4A 

Rib: Yielded 

4B 

Rib: Cracked 

4C 

Rib: Fractured 

4H 

Rib: Cavitation 

4K 

Rib: Good 



4L 

5A 

58 

5C 

5K 

6A 

6B 

6C 

6H 

6K 

7A 

7B 

7C 

7F 

7G 

7K 

7L 

81 

8K 


Rib: Loose 

Rib Weld to Support Ring: Yielded 

Rib Weld to Support Ring: Cracked 

Rib Weld to Support Ring: Fractured 

Rib Weld to Support Ring: Good 

Socket Support: Yielded 

Socket Support: Cracked 

Socket Support: Fractured 

Socket Support: Cavitation 

Socket Support: Good 

Socket; Yielded 

Socket; Cracked 

Socket: Fractured 

Socket: Galled 

Socket: Wear 

Socket: Good 

Socket: Loose 

Ball-Socket Interface: Welded (failure) 

Ball -Socket Interface: Good 
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TABLE 2A (Continued) 


NODE 

DESCRIPTION 


16A 

Bellows 

Weld: 

Yielded 

16B 

Bellows Weld: 

Cracked 

16C 

Bellows Weld: 

Fractured (fai 

16K 

Bellows Weld: 

Good 

17A 

Bel 1 ows : 

Yielded 

17B 

Bel 1 ows : 

Cracked 

17C 

Bellows: 

Fractured (failure) 

170 

Bellows: 

Ruptured (failure) 

17E 

Bellows: 

Dented 

17J 

Bellows: 

Flow Obstructed 

17K 

Bellows: 

Good 
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TABLE 2B 


Probability Of Occurrence And Time Distribution 
Of Nonzero Elements Of Large Matrix 


START 

END 

PROBABILITY 

TIME FOR* 

NODE 

NODE 

OF OCCURRENCE 

OCCURRENCE 

23 

2A 

.005 

1 

32 

2A 

.005 

1 

33 

2A 

.005 

1 

39 

2A’ 

.005 

1 

3C 

2A 

.005 

3 

4C 

2A 

.005 

3 

4H 

2A 

.005 

3 

4L 

2A . 

.005 

3 

5C 

2A 

.005 

3 

6C 

2A 

.005 

3 

81 

2A 

.005 

1 

20 

2B 

.005 

2 

21 

2B 

.005 

2 

22 

2B 

.005 

1 

23 

2B 

.005 

1 

25 

2B 

.005 

2 

32 

2B 

.005 

1 

33 

2B 

,005 

1 

39 

2B 

.005 

1 

40 

2B 

.005 

1 

41 

2B 

.005 

1 

2A 

2B 

.050 

1 

2E 

2B 

.050 

1 

2J 

2B 

.005 

1 

3A 

2B 

.005 

1 

3C 

2B 

.005 

1 

4A 

2B 

.005 

1 

4C 

2B 

.005 

1 

4H 

2B 

.005 

1 

4L 

2B 

.005 

1 

5C 

2B 

.005 

1 

81 

2B 

.005 

1 

2B 

2C 

.050 

2 

32 

2E 

.005 

1 

33 

2E 

.005 

1 

32 

2J 

.005 

1 

33 

2J 

.005 

1 

2E 

2J 

.005 

1 

* 1 implies 

instantaneous 



2 implies 

between 0 and 

5 


3 implies 

between 0 and 

10 
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TABLE 2B (Continued) 


START 

END 

PROBABILITY 

TIME FOR* 

NODE 

NODE 

OF OCCURRENCE 

OCCURRENCE 

22 

3A 

,005 

1 

23 

3A 

.005 

1 

32 

3A 

.005 

1 

39 

3A 

.005 

1 

40 

3A 

.005 

1 

41 

3A 

^ .005 

1 

4C 

3A 

.005 

3 

4H 

3A 

.005 

3 

4L 

3A 

.005 

3 

5C 

3A 

.005 

3 

6C 

3A 

.005 

3 

81 

3A 

.005 

1 

20 

3B 

,005 

2 

21 

3B 

.005 

2 

22 

3B 

.005 

1 

23 

3B 

.005 

1 

25 

3B 

.005 

2 

32 

3B 

.005 

1 

39 

3B 

.005 

1 

40 

3B 

.005 

1 

41 

3B 

.005 

1 

42 

3B 

.005 

2 

2A 

3B 

.050 

1 

2E 

3B 

.050 

1 

2J 

3B 

.005 

1 

3A 

3B 

.005 

1 

4A 

3B 

.005 

1 

4€ 

3B 

.005 

1 

4H 

3B 

.005 

1 

4L 

3B 

.005 

1 

81 

3B 

.005 

1 

3B 

3C 

.050 

2 

22 

4A 

.005 

1 

23 

4A 

.005 

1 

31 

4A 

.005 

1 

32 

4A 

.005 

1 

39 

4A 

.005 

1 

40 

4A 

.005 

1 

41 

4A 

.005 

1 

42 

4A 

.005 

1 

20 

4A 

.005 

1 

3C 

4A 

.500 

1 • 

4C 

4A 

.500 

1 

4H 

4A 

.050 

1 

4L 

4A 

.500 

1 

5C 

4A 

.500 

1 

6C 

4A 

.500 

1 

81 

4A 

.005 

1 
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START 

NODE 

. END 
NODE 

TABLE 2B (Continued) 

PROBABILITY 
OF OCCURRENCE 

TIME FOR* 
OCCURRENCE 

4B 

4C 

.050 

2 

31 

4H 

.005 

1 

3C 

4H 

.500 

1 

4C 

4H 

.500 

1 

5C 

4H 

.500 

1 

3C 

4L 

.005 

1 

4C 

4L 

.005 

1 

5C 

4L 

.005 

1 

22 

5A 

.005 

1 

23 

5A 

.005 

1 

32 

5A 

.005 

1 

39 

5A 

.005 

1 

40 

5A 

.005 ' 

1 

41 

5A 

.005 

1 

4C 

5A 

.500 

1 

4H 

5A 

.050 

1 

4L 

5A 

.500 

1 

5C 

5A 

.500 

1 

6C 

5A 

.500 

1 

81 

5A 

.005 

1 

20 

58 

.005 

2 

21 

5B 

.005 

2 

22 

5B 

.005 

1 

23 

5B 

.005 

1 

25 

5B 

.005 

2 

32 

5B 

.005 

1 

40 

5B 

.005 

1 

41 

5B 

.005 

1 

42 

5B 

.005 

2 

2A 

5B 

.050 

1 

2J 

5B 

.005 

1 

3A 

5B 

.050 

1 

4A 

5B 

.050 

1 

4C 

5B 

.500 

1 

4H 

5B 

.050 

1 

4L 

5B 

.500 

1 

5A 

5B 

.050 

]. 

81 

5B 

.005 

1 

5B 

5C 

.050 

2 

22 

6A 

.005 

1 

23 

6A 

.005 

1 

31 

6A 

.005 

1 

32 

6A 

.005 

1 

39 

6A 

.005 

1 

40 

6A 

.005 

1 

41 

6A 

.005 

1 

81 

6A 

.005 

1 
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TABLE 2B (Continued) 


START END PROBABILITY 

NODE NODE OF OCCURRENCE 


TIME FOR* 
OCCURRENCE 


20 

4B 

.005 

2 

21 

4B 

.005 

2 

22 

4B 

.005 

2 

23 

4B 

.005 

2 

25 

4B 

.005 

2 

32 

4B 

.005 

1 

39 

4B 

.005 

1 

40 

4B 

.005 

1 

41 

4B 

.005 

1 

42 

4B 

.005 

2 

2J 

4B 

.005 

2 

3C 

4B 

.050 

1 

4A 

4B 

.050 

r 

4C 

4B 

.050 

1 

4H 

4B 

.005 

1 

4L 

4B 

.050 

1 

5C 

4B 

.050 

1 

81 

4B 

.005 

1 

20 

6B 

.005 

2 

21 

6B 

.005 

2 

22 

6B 

.005 

1 

23 

6B 

.005 

1 

25 

6B 

.005 

2 

31 

6B 

.005 

1 

32 

6B 

.005 

1 

39 

6B 

.005 

1 

40 

6B 

.005 

1 

41 

6B 

.005 

1 

42 

6B 

.005 

2 

6A 

6B 

.050 

1 

81 

6B 

.005 

1 

6B 

6C 

.050 

2 

31 

6H 

.005 

1 

4H 

6H 

.500 

1 

6C 

6H 

.050 

1 

22 

7A 

.005 

1 

23 

7A 

.005 

1 

31 

7A 

.005 

1 

32 

7A 

.005 

1 

39 

7A 

.005 

1 

40 

7A 

.005 

1 

41 

7A 

.005 

1 

81 

7A 

.005 

1 

20 

7B 

.005 

2 

21 

7B 

.005 

2 

22 

7B 

.005 

1 

23 

78 

.005 

1 

25 

7B 

.005 

2 
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TABLE 2B (Continued) 


START END PROBABILITY TIME FOR* 

NODE NODE OF OCCURRENCE OCCURRENCE 


31 

7B 

.005 

1 

32 

7B 

.005 

1 

39 

7B 

.005 

1 

41 

7B 

.005 

1 

42 

7B 

.005 

2 

6A 

7B 

.050 

1 

7A 

7B 

.050 

1 

81 

7B 

.005 

1 

78 

7C 

.050 

2 

32 

7F 

.005 

3 

38 

7F 

.005 

3 

40 

7F 

.005 

1 

41 

7F 

.005 

1 

3C 

7F 

.050 

3 

4C 

7F 

.050 

3 

4H 

7F 

.050 

3 

4L 

7F 

.050 

3 

5C 

7F 

.050 

3 

7A 

7F 

.050 

3 

7B 

7F 

.050 

3 

7C 

7F 

.050 

3 

7G 

7F 

.050 ' 

3 

32 

7G 

.005 

3 

38 

7G 

.005 

3 

40 

7G 

.005 

1 

41 

7G 

.005 

1 

3C 

7G 

.050 

3 

4C 

7G 

,050 

3 

4H 

7G 

.050 

3 

4L 

7G 

.050 

3 

5C 

7G 

.050 

3 

7A 

7G 

.050 

3 

7B 

76 

.050 

3 

7C 

7G 

.050 

3 

32 

81 

.005 

1 

7F 

81 

.050 

3 

32 

16A 

.005 

1 

33 

16A 

.005 

1 

39 

16A 

.005 

1 

40 

16A 

.005 

1 

41 

16A 

.005 

1 

2A 

16A 

.005 

1 

2E 

16A 

.005 

1 

2J 

16A 

.005 

1 

20 

16B 

.005 

2 

21 

16B 

.005 

2 

22 

16B 

.005 

1 
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TABLE 2B (Continued) 


START 

END 

PROBABILITY 

TIME FOR* 

NODE 

NODE 

OF OCCURRENCE 

OCCURRENCE 

23 

16B 

.005 

1 

25 

16B 

.005 

2 

32 

16B 

,005 

1 

33 

16B 

,005 

1 

39 

168 

.005 

1 

40 

16B 

.005 

1 

41 

16B 

.005 

1 

42 

16B 

.005 

2 

2A 

16B 

.050 

1 

2E 

16B 

.050 

1 

2J 

16B 

.005 

1 

16A 

16B 

.050 

1 

16B 

16C 

.050 

2 

22 

17A 

.005 

1 

23 

17A 

.005 

1 

31 

17A 

.005 

1 

32 

17A 

.005 

1 

33 

17A 

.005 

1 

38 

17A 

.005 

1 

39 

17A 

.005 

1 

40 

17A 

.005 

T 

41 

17A 

.005 

1 

4H 

17A 

.005 

1 

4L 

17A 

.005 

1 

20 

17B 

.005 

3 

21 

17B 

.005 

3 

22 

17B 

.005 

1 

23 

17B 

.005 

1 

25 

17B 

.005 

2 

32 

17B 

.005 

1 

33 

17B 

.005 

1 

39 

17B 

.005 

1 

40 

17B 

.005 

1 

41 

17B 

.005 

1 

42 

17B 

.005 

2 

4H 

17B 

.050 

3 

4L 

17B 

.050 

3 

17A 

17B 

.050 

1 

17B 

17C 

.050 

2 

23 

17D 

.005 

1 

32 

17D 

.005 

1 

33 

17D 

.005 

1 

4H 

17D 

.050 

1 

4L 

17D 

.050 

1 

32 

17E 

.005 

1 

33 

17E 

.005 

1 

4H 

17E 

.050 

1 

4L 

17E 

.050 

1 
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TABLE 2B (Continued) 


START 

END 

PROBABILITY 

TIME FOR* 

NODE 

NODE 

OF OCCURRENCE 

OCCURRENCE 

32 

I7J 

.005 

1 

4H 

17J 

.050 

1 

4L 

17J 

.050 

1 

17E 

17J 

.005 

1 

32 

21 

.005 

1 

2E 

21 

.500 

1 

2J 

21 

.500 

1 

4H 

2] 

.500 

1 

4L 

21 

.500 

1 

17E 

21 

.500 

1 

17J 

21 

.500 

1 

6H 

21 

.500 

1 

3C 

32 

.050 

] 

4C 

32 

.050 

1 

4L 

32 

.005 

1 

5C 

32 

.050 

1 

6C 

32 

.050 

1 

7C 

32 

.050 

1 

7F 

32 

' .005 

1 

32 

23 

.005 

1 

2E 

23 

.050 

1 

2J 

23 

. 500 

1 

4H 

23 

.500 

1 

4L 

23 

.500 

1 

17E 

23 

.050 

1 

17J 

23 

.500 

1 

6H 

23 

.500 

1 
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Table 3 

Results of 5000 6ERTS Mission Simulations 
Using Small Matrix for Constrained Bellows 


Failure 

Node 

Failure 

Prob. 

Mean Time 
to rtode 

Standard 

deviation 

Min. 

time 

2C 

.0008 

3.4759 

15.037 

1.38 

17C 

.0200 

2.278 

3.1049 

0 

17D 

.0104 

0.0 

.0 

0 


Max. 

time 


4.627 

9.9056 

0 
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Table 4 


Results of 1000 Mission GERT 

Simulations 

Using Large Matrix for 

Constrained 

Bellows 

Node 

Prob . 

Mean 
Time to 
Node 

Std. 
Dev . 

Min . 
Time 

Max . 
Time 

Inlet Ring Fract. 

.002 

4.4 

' 3.8 

1.7 

7.1 

Ball “Socket Interface Weld. 

No values 

recorded . 




Bell ows Weld Fracture 

No values 

recorded . 




Bellows Fracture 

.001 

5.4 

0 

5.4 

5.4 

Bellows Rupture 

.008 

0 

0 

0 

0 

Success 

.989 

10.0 

0 

10,0 

10,0 


Time- = 10 = Success 



Table 5 


Nodes (States) Leading to Bellows Rupture {170, Node 67) 


Node # 

Item Description 

Item # 

Freq.* 

5 

LH2 Press. Var. 

23 

16 

14 

Proj.-Int. 

32 

2 

15 

Proj .-Ext. 

33 

1000 (source) 

39 

R(ib- displaced + I 

4H + I 

13 

41 

Rib- loose + I 

4L + I 

0 


*from 1000 simulations GERT run. 

Possible conclusions: 

(1) shield bellows 

(2) examine more closely the possibilities for LH2 pressure variations 
and rib displacements. 
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Fig. 1. Sketch of high pressure constrained bellov/s. 





ENVIRONMENT ENVIRONMENT ENVIRONMENT 



Bellows 

Rupture 


ENVIRONMENT 



foil 


Fig. 2. Abbreviated version of constrained 
bellows graphical node network. 
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Smil MATRIX (ORIGINAL) 


CAUSES 


EFFECTS 


r-) CO 

cvj oj 


CSJ O 

ro cd- 


Ct CQ 
Oj CM 


O 

CM 


< 


ca 






CD 


CD 


Q 


Vibration-Ext. 


2^ 


0 

0 

0 

0 

1 

0 

0 

1 

0 

b 

1 

0 


1 

Pressure Var. 


23 

0 

0 

.. 0 

0 

1 

1 

0 

1 

1 

0 

1 

1 

0 

1 

0 

Project! le-Int. 


32 

0 

0 

0 

0 

1 

1 

0 

1 

1 

0 

1 

1 

0 

1 

0 

Starting Shock 


40 

0 

0 

0 

0 

0 

1 

0 

1 

1 

0 

1 

1 

0 

0 

0 

Inlet Sup. Ring 

Yield 

2A 

0 

0 

0 

0 

0 

T 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Inlet Sup. Ring 

Crack 

2B 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

Inlet Sup. Ring 

Fract. 

2C 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Rib Yield 


4A 

0 

0 

0 

0 

0 

1 

0 

0 

1 

0 

0 

0 

0 

0 

0 

Rib Crack 


4B 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

Rib Fract. 


4C 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Bellows Yield 


17A 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

Bellows Crack 


170 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

Bellows Fract. 


17C 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Bellows Rupt, 


17D 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Success 


S 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

n 

n 


1 

Figure 3 

Small Interactive Matrix for Constrained Bellows. 
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Succ. 



“TOTAL" SMALL MATRIX 


6 

each element = T. corresponding element of (small matrix)*^ 
n=l 

CO 

E = 0 


CAUSES 




7 





EFFECTS 









o 

CO 

CM 

o 


CO 



CO 

o 

<c 



Q 




OJ 

CM- 

CO 


CM 

CM 

•CM 

• td" 







tn 

Vibration-Ext. 

20 

0 

0 

0 

0 

1 

3 

3 

0 

1 

1 

0 

1 

T 

0 

1 

Pressure Var. 

23 

0 

0 

0 

0 

3 

7 

7 

1 

2 

2 

1 

2 

2 

1 

0 

Projectile-Int. 

32 

0 

0 

0 

0 

3 

7 

7 

1 

2 

2 

1 

2 

2 

1 

0 

Starting Shock 

40 

0 

0 

0 

0 

2 

6 

6 

1 

2 

2 

1 

2 

2 

0 

0 

Inlet Sup. Ring Yield 

2A 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

Inlet Sup. Ring Crack 

2B 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

Inlet Sup. Ring Fract. 

2C 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Rib Yield 

4A i 

0 

0 

0 

0 

1 

3 

3 

0 

1 

1 

0 

0 

0 

0 

0 

Rib Crack 

4B 

0 

0 

0 

0 

1 

2 

2 

0 

0 

1 

0 

0 

0 

0 

0 

Rib Fract. 

4C 

0 

0 

0 

0 

1 

2 

2 

0 

0 

0 

0 

0 

0 

0 

0 

Bellows Yield 

17A 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

0 

Bellows Crack 

17B 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

Bellows Fract. 

17C 

' 0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Bellows Rupt. 

17D 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Success 

S 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 








4- 
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2 



Figure 4 

Summation of product matrices for small matrix (Figure 3) of constrained bellows 
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1. Load, p 

2. Temperature, T 

3. Temperature Gradient, ^ 

4. Hardness, H 

5. Yield Strength, Y 

6. Fatigue Limit, F 

7. Residual Stress, 

8. Stress State, a 

9. Crack Length, c 

10. Rim Contour, G 

1 1 . Rim Thickness , R 
12 Shelled Tread 

13. Thermal Cracks 
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Figure 5 

Interactive matrix for railroad wheel. 


Appendix 

/ ABSTRACT 

/ 

This report describes the procedures for using e digital computer program 
for simulating CERT networks. New and advanced GERT concepts are Introduced. 

The simulation program can accommodate GERT networics which have logical 
operations associated with the Input side of a node and branching operations 
associated with the output side of a node. Logical operations associated 
with a node are defined in terms of the number of realisations of activities 
Incident to the node that must occur before the node can be realised. A 
similar quantity Is required for realising the node after Its first realisation. 
The branching operation associated with a node Is either DETERMINISTIC (all 
branches are taken that emanate from the node) or PROBABILISTIC (a selection 

of one of the branches emanating from the node Is taken when the node Is 
realized) . 

Branches of a GERT network are described in terms of a probability that 
the branch Is realized; a time to perform the activity represented by the 
branch; a count designation and an activity number. The time associated with 
a branch can be a random variable. The count designator identifies a count 
set for whiA a counter Is Indexed every time the branch Is realized. The 
activity number identifies nodes that are affected by the realization of the 
branch. Through activity numbers, a network can be modified during the 
aimulatlon of the natvork. 

GERT networks having the above cheracterlstlcs are simulated by a program 
labeled GERTS III. CERTS HI Is a fundamental package and as such provides 
the foundation for building advanced network simulation programs, in this 
report GERTS III been extended In three directions. First, e queue node 
capability was added resulting In the GERTS IIIQ program. Then cost Informa- 
tion was added to obtain GERTS IHC. The third extension Involved the 
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Inclusion of rssourcs tnqulrsamnts for each activity and United resources 
to parfora the project* The einulatlon package to study resource allocation 
has been labeled <^RTS XIXR. 

Exanplae of the use of CERTS III, CERTS II IQ, CERTS IIIC, and CERTS 
IIIR are presented In the report. The CERTS III programs are written in 
FORTIW Z^* The program has been exercised on the IBM 360/65 system. GERT 
notvorks with up to 1,000 nodes can be analysed. 
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THK GERT SIMULATION PROGRAMS: 

GERTS III; GERTS IIIQ; GERTS IIIC; and GERTS IIIR 

INTRODUCTION 

The (.ERT simulation program Is a general purpose program for simulate 
ing networks. The program Is written In FORTRAN IV. The input to the 
program is a description of the network in terms of its nodes and branches 
along with control Information for setting up the simulation conditions. 
Applications of earlier GERT simulation programs [7,8,9] resulted in the 
need for new network concepts and additional capability. This need has 
been satisfied with the completion of the GERT Simulation Program III 
hereafter referred to as GERTS III, 

The following list describes the features in GERTS HI, 

1. Branches that are characterized by: 

^ probability of being Included in the network; 

b, A time re<5uired to complete the activity represented 
by the branch, the time is specified by defining a 
parameter set number and a distribution type; 

c, A counter type to identify the branch as belonging 
Co a particular group of branches; and 

d, An activity number. 

2. Nodes that are characterized by; 

a. The number of releases required to realize the node 
for the first time; 

b. The number of releases required to realize the node 
after the first time; 

c. The removal of events that are scheduled to release 
the node; 

d. method for scheduling the activities emanating 
from the node (DETERMINISTIC or PROBABILISTIC) ; and 

e. The statistical quantities to be estimated for the 
node . 
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3. Modlfitatlon of the network based on the occurrence of 
end of activity events during the simulation of the net- 
work. 

4. A' met hod tor tracing a set of simulation run«. 

5. Automatic printout of the description of the network and 
the I Inal results. 

During Che research leading to GERTS III, the following concepts were 
explored: 

1) nodes that provided a storage or queue capability - a Q-node; 

2) costs associated with the performance of activities; and 

3) activities that required resources. 

\ It was found that GERTS III could be modified to allow the simulation of 
networks that Involved these concepts and implementation proceeded on a 
limited scale. It was felt that separate programs should be maintained for 
these new concepts but that each should contain the basic GERT simulation 
program, GERTS III. The results of the exploratory research are: 1) CERTS 

IIIQ, a GERT network simulation program that Includes Q-nodes; 2) GERTS 
me, a GERT network simulation program that collects cost statistics; and 
3) GERTS IIIR, a GERT network simulation program that Involves resource 
allocation decisions. 

The main purpose of this report is to describe the procedure for using 
GERTS III, GERTS IIIQ, GERTS IIIC, and GERTS IIIR. Since many new concepts 
associated with GERT have been developed It is necessary to describe these 
before proceeding with examples illustrating the use of the new programs. 

OVERALL PROGRAM OPERATION 

The GERTS III program performs a simulation of a network by advancing 
time from event to event. In simulation parlance this is termed a next 
event simulation. The events associated with a simulation of a GERT net- 
work are; 
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(1) Start of the simulation; (2) End of an activity; and (3) Comple- 
tion of a simulation run of the network. Since GESTS HI is a FORTRAN IV 
program the operating procedure is the standard FORTRAN operating procedure. 
Many concepts of GERTS HI were adopted from GASP HA [10], 

The start event causes all source nodes to be realized and schedules 
the activities emanating from the source nodes according to the output type 
of the source node. The output type for all nodes is either DETERMINISTIC 
or PROBABILISTIC. In the former ease, all activities emanating from the 
node are scheduled and in the latter case, only one of the activities 
emanating from the node is scheduled. By scheduling an activity Is meant 
that an event "end of activity" Is caused to occur at some future point in 
time. The simulation proceeds from event to event until the conditions 
which indicate that the simulation of the network is completed are obtained. 

The above process Is then repeated for a specified number of simulations of 
the network. 

As part of the Input data, the number of releases required to realize 
a node is specified. Each time an end of activity event occurs, the number 
of releases for the end node of that activity Is decreased by one. When 
the number of releases r.®alning Is zero, the node Is realized. At this 
time the number of releases Is set equal to the number of releases required 
to realize the node after the first time, and the activities emanating from 
the node are scheduled. Again, the number of activities scheduled depends 
On the output type for the node. 

For each activity scheduled, an end of activity event is put in a file 
containing all events in chronological order. The end of activity events 
are removed from the event file one at a tine and at each removal Instant, 
a test is performed to determine if a node Is realized. If a node Is not 
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realizedi the next event is removed from the event file. If a node is 
realized, activities from that node are scheduled and the simulation is 
continued. The simulation ends when a prescribed number of sink nodes havt 
been realized. As part of the input data, the number of source nodes, sink 
nodes and nodes on which statistics are collected as well as their node 
numbers and the number of nodes required to realize the network are defined. 

The above process describes one simulation of a network. The program 
is written to allow multiple simulations to be performed. The number of 
simulation runs to be performed is part of the input data. The GERT simulation 
program automatically initializes the pertinent variables in order that 
consecutive simulations of the same network can be performed and, if desired, 
permits simulations of different networks to be performed consecutively. 

GERTS III NETWORK CHARACTERISTICS 

GERT networks consist of nodes and directed branches. First consider 
the characteristics -that describes a node. The number of releases associated 
with a node specifies the number of times activities incident to the node 
must be realized before the node can be realized. When the number of 
releases Is 1, the input side of the node can be thought of as an OR 
operation. If the number of releases equals the number of activities Incident 
to the node, the node can be thought of an as AND operator. However, it is 
permissible to specify the number of releases to be less than or greater 
than the number of activities Incident to the node. For example, the number 
of releases can be 2 whereas the number of activities incident to the node 
could be 3. This would represent the case where if 2 of the 3 activities 
were realized, the node is realized. Alternatively, the number of releases 
can be 2 and the number of activities incident to the node could be 1. This 
would represent th<i case where the activity must be realized twice before the node 
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is realized. 


Figure 1 lllustraces the node symbolism for 6ERTS III . 


Number of 
Releases 


Number of 
Releases 
to Repeat 




Probabilistic 

Output 


Figure 1. Node Symbolism for GERTS III 

In Figure I it is seen that the semicircle, J , on the output side of a 
node is used to represent a DETERKINISTIC output, and a lazy V, > , for 
a PROBABILISTIC output. Nodes are also characterized by their function in 
the network. A GERT analyst can specify a node as: 

1. A Source Node; 

2. A Sink Node; 

3. A Statistics Node; or 

4. A Mark Node. 

Activities emanating from a source node are started at time zero. A 
sink node is a node that Indicates that the network may be realized when 
It la realized. (NOTE: a sink node many have successor activities.) A 

statistics node Is one on which statistics are maintained. All sink nodes 
are automatically made statistics nodes. A mark node establishes a 
reference time and permits the calculation of the time it takes to go 
between two nodes of the network. 

For statistics nodes, GERTS 111 obtains statistical estimates associated 
with the time a node is realized. Five types of time statistics are possible 
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F. The time of first realization of a node; 

A. The time of all realizations of a node; 

B, The time between realizations of a node; 

I. The time Interval required to go between two 

nodes in the network; and 

D. The time delay from first activity completion 
on the node until the node is realized. 

The nodes on which statistics are to be collected and the type of statistics 
desired are part of the description given to a node by the input to GERTS 
III. They are not part of the graphical representation . 

The branches of GERT networks represent activities and/or information 
transfers. The term activity will be used to Identify both. Activities 
emanate from a start node and are incident to an end node. Associated with 
activities are a probability that the activity will be realized given Its 
start node is realized and a time to perform the activity given the activity 
is realized. For GERTS III the time variable is specified by a parameter 
set number and a distribution type. The following nine distribution types 
are available: 


1. 

Constant; 

2, 

Normal; 

3. 

Uniform; 

4. 

Erlang; 

5. 

Lognormal; 

6* 

Poisson; 

7. 

Beta; 

8. 

Gamma ; and 

9. 

Beta fitted to three . 
parameters as in PERT. 


The parameter set number along with the distribution type completely describe 
the time variable associated with an activity. Each distribution type 
specifies the arrangement of the parameters in a parameter set. With GERTS 
III, two additional characteristics can be associated with an activity. 
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These are a counter type and an activity number. 

The counter type number specifies the counter to be increased by 1 every 
time the activity is realized. The number of counter types permitted is 
limited to 4*. Any number of activities may be associated with a counter 
type.** Statistics are automatically kept on the counter types. At the end 
of all simulation runs, the average and standard deviation of the number of 
times a counter type was realized prior to the realization of each node for 
which statistics are coJlected Is determined and printed. In addition, the 
minimum and maximum number of tines activities having the specified counter 
type were realized during a simulation Is printed. Since the number of counts 
is always referenced to the realization of a node, the number of counts 
occurring prior to the realization of a node may be different In different 
simulation runs due to the sequence In which the nodes are realized. 

Activity numbers are given to activities to permit network modifications 
based on the realization of the activity. Specification of an activity number 
does not automatically Indicate that the network will be modified. However, 
only activities with activity numbers can cause the network to be modified. 
Network modification Involves the replacing of a node by another node on the 
output Bide only.*i^* Thus when a node Is realized, the activities to be 
started depend on the modifications that have taken place. For example if 
node 8 replaces node 5 then when node 5 is realized the activities emanating 

from node 8 are scheduled to start. A node may be changed many times before 
it la actually realized. 






Changes In the dlTOnslons of two arrays can be made to increase this value 

t^q-nodes may statlatlca are collected or 

v( noaea may not have counter types associated with them. 

571 change the input side of a node also [9 9 

of releases rOTalning*ro“Jhri^ut'’sldr* Ti^* 

which the input side*of a nodfwL modifi^f' 
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The activity number causing the network modification along with all t>»e 
nodes to be replaced, and the nodes to be Inserted, are specified by the 
user. The method for incorporating network modifications is described lat> i 
in the program operating procedure section. Figure 2 Illustrates the branch 
and node modification notation that will be used throughout this report. 
Modifications will be shown by a dashed branch with the activity number 
attached in a square. The modification in Figure 2 Is read "the output of 
node 2 is replaced by node 4 when activity 1 is realized". 



;> = probability of realization 
tp= parameter set for time 

tp= distribution type 

c - counter type 
a = activity number 



Node A is replac-d 
by node B when 
activity with 
activity number 1 
is realized. 


Figure 2, Illustration of Branch Descriptors and 
Network Modification Symbolism. 


As an illustration of these new characteristics, consider the network of 
Figure 3. 


V 
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Igure 3. Network Containing Information Branches 
in Addition to Activities. 

Thia network represents the ch«,gl„g of the network structure when the 
self-loop about node 2 1., taken three tines and is acconpllshed In the 
following n,anner. The output of node 3 la DETERMIHISTIC so that every 
time node 3 la realized both branchea emanating from node 3 are taken. 

The branch from node 3 to node 4 la used to count the number of times 
node 3 la realized. Node 4 Is only realized when the branch Incident to 
It la realized thrge times (of course, this corresponds to three traver.als 
of the self-loop). When node 4 Is realized, the activity labeled activity 
number 1 (a 1 on the network 1„ this case) causes node 2 to be replaced 
by node 7. and the objective of changing the network Is achieved.* of 
significant Importance In the above network Is the Incorporation on the 
network of branches representing activities and branches representing 

«IllzL'p?^Jrto'’t^: t‘h® 5 is 

If a zero time Is asaoc^Lr^^th Lth ^ T" ^ 2- 

have the branch from node 3 to node ’’Trachea, normal operation would 
first. By assigning a small nevsrt Teallzed first since It was scheduled 
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information transfers. The inclusion of different types of branches within 
a GERT network expands the network modeling capability within the OERT frame- 
work. 

I nput to GERTS 111 and Limitations 

The input requirements for GERTS III consist of at most 7 different types 
of data cards. These seven cards describe the network and the control infor- 
mation for performing the simulation. A general description of each card is 
provided below. In Appendix A, a complete description for each field of 

each Data Card type is presented. 

Data Card 

General Description 

1 Identification Information, number of times simulation is to 
be performed and an initial random number seed (1 card) . 

2 General node, counter and network modification data (1 card) . 

3 Description of each node (1 card for each node) . 

4 Parameters of time variables associated with activities (I 
card for each parameter set) . 

5 Description of each activity (1 card for each activity). 

6 Network modifications desired (1 card for each activity that 
modifies network. If none, no Data Card Type 6 is required). 

7 Run numbers to be traced (1 card only if tracing is requested 
by using a negative project number). 

The dimensions of the GERTS III program have been set to allow for a 
maximum of 999 nodus, 999 activities, 4 counter types, collections of statis- 
tics on 100/ (number of counter types + 1) nodes, and 300 parameter sets. 

Examples of GERTS III 

In previous reports examples were given that Illustrated the use of the 
GERT Simulation Program to model to: 

1, The modification of a project based on elapsed time [9]; 

2. The modification of a network based on the realization of 
the first of two activities [9]; 

3» The starting of a phase of a project based on progress to 
date [9); 
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Multiple modifications of a node during one realization of 
a network [9]; 

5. The Planning R & D Projects [3]; 

h. An advertising prorootloa in studying consumer brand choice 
( 4 1 ; and 

7. A manufacturing process [11] . 

During the past year, the OERTS program has been used to analyze segments 
c: a University [1], a product development problem for a large computer 
manufacturer, the R & D program for a weapons system and maintenance and 
checkout operations. 

In is report, twt> examples are presented that demonstrate the new 
concepts included in GERTS III. The examples are: 

1. Illustration of the features of GERTS III; and 

2. Analysis and sequenclx^ of space experiments. 

E^xample 1. Illustration of the Features of GERTS III. 

Figure 4 shows the network to be analyzed In Example 1. The source node 
for the network is node 2 and the sink node Is node 12. From node 2 three 
activities emanate which are performed simultaneously. These activities 
cause nodes 3, 4, and 5 to be realized. The activities emanating from 
nodes 3, 4, and 5 are all incident to node 6. The number of releases required 
to realize node 6 is three, therefore node 6 will only be realized when all 
three activities incident to node 6 are realized. For this example, we 
desire to obtain statistics on the time delay between the completion of the 
first activity Incident to node 6 and the time node 6 is realized. To 

obtain these statistics, node 6 Is defined as a statistics node with delay 
statistics Ccode D) desired. 

It is also desired to collect statistics on the time required to go from 
node 7 to node 11. To accomplish this node 7 is defined as a mark node 
(node type 4) and node U is defined as a statistics node with the statistics 





caleiil®E®d on m basis (code I). The statistical quantities coUot't- 

ed at !?aod® 11 Hill be tbi‘ of time from the tealixation of node 7 ti> 

the ireallxat loin of Eiode IS. If slteynat ! ve psth® existed hoiwt'en node 7 .-md 
11, the imearval node would collect statistics on the time required to 
crawr©© th® sepax-ste paths. This will be further Illustrated in Example 1, 
Node 8 has a probabilistic output side so that either activity emanating 
from nod® 8 can b© taken. For those situations where the feedback path is 
taken, it is desired to deteraaine the time required to traverse the feedback 
path. This is accomplished by making node 8 a statistics node with statistics 
collected on ti®® between realisatio® of node 8 (code B) . Nodes 9 and 10 
w©r® ®lso defined ©s ©tatistics nodes. For node 9 statistics are collected 
on its first realizationts (code F) aM for node 10 statistics are collected 
on all realizations (code i\) . Thus, this example includes all the types of 
statistical calculations that cm be included within the CERTS HI program. 
Since nod® 12 is a sink node, statistics will automatically be collected on 
It. For ehi® ©siasiplsj) bt-itlatics on tb© first realization of node 12 were 
specified. If the type of statistics desired Is not specified by the input 
inf orMation, tb® GKHTS III prograsa th©t ©t©ti©t’ics on first realization 

are desired, i.e., the default condition is first realization. 

Moo included in thl© exsapl© is the network modification feature and 
the ©topping of an activity In progr^as. If tb® top activity (activity 1) 
fro® node ^9 to node 10 is realized first then node 10 is replaced by node 
13*. If the boet@® activity (activity niaaber 2) Is realised first then node 
10 regain© iB the network. If node 10 had been replaced by node 13 then 


w For nodes on feedback paths, the input and output sides are reversed. 
However, the number of realizations to cause the node to be realized for 
the first time i@ still iadlcsted by the top number. 
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node 10 is reinstated Into the network. The network modification is 
Implemented by assigning activity numbers to the branches between node ^ 
and node 10. l^en either of these activities are completed, the network 
modification Is implemented and the other activity is stopped since node in 
l>as an assigned to It. The removal of scheduled activities incident 
to a node applies to all realizations of the node, 

A listing of the input cards for this example is shown in Figure 5. The 
description of the network that is printed by the GERTS III program is 
shown in Figures 6 and 7. Figure 8 presents a trace of a simulation run 
for this network. We will use this trace to describe the operating pro- 
cedure of the GERTS III program in simulating the network shown in Figure 14. 

The simulation begins by scheduling end of activity completion events 
from each source node. For Example 1, the source node is node 2 and end 
of activity events are scheduled for the activities from node 2 to node 
3, node 2 to node 4, and node 2 to node 5. To obtain the time for each of 
these events, sam]>les are drawn from: 1) a normal distribution using para- 
meter set 1, 2) the Erlang distribution using parameter set 2, and 3) the uni- 
form distribution using parameter set 3. 

The trace of the simulation starts with the first end of activity event. 
This Is seen to be the activity that is incident to node 5 and the event 
occurs at time 1,88. Since node 5 had its number of releases equal to 1, 
node 5 Is realized and the activity from node 5 to node 6 can be initiated. 

An end of activity event for this activity is then scheduled by the program. 

I 

At time 4.31, the activity on node 4 is completed as shown by the second line 
in the trace of Figure 8. At time 7.88 the activity from node 5 to node 6 
was completed and we have the first activity incident to node 6 being com- 
pleted* (To determine from the trace that this was the activity from node 5 


14 




Figure 5. Input Bate for Exmple 1 
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HIGHEST NODE NUMBER IS 13 
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Figure 6* Echo Check for Exenple 1 
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Figure 8. Tracing of Activity Complttions for the Sioulation of the Network in Example 1 
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3o eihis at£Fjlbufc(Ss of the activity are examined). Since node h is .1 
eh® program records the time 7.88 as the time of first complwi.,., 
olf aa activity shat is incident to node 6. At time 8.31, the activity from 
»ode ^ to node S is completed. At time 10.16 the activity Incident to node 
3 is coBplesed and node 3 is realised. The activity from node 3 to node 6 is 
Chen scheduled and is completed at time 12.09. this is the third activity that 
is incident to aode 6 hence node 6 is realised. The time from the fir. 

activity eoapletion on node 6 to the tiEo that node 6 is realised is the delay 
tte. This value lo 4.21 (12.09 =■ 7.38) is one sample of the delay time 

associated «ith aode 6. ehe activity from node 6 to node 7 is scheduled. 

aM. 0 aeeiwUy completed a£ £1®@ 13,7Q<, 

Mode 7 is a aark node and th@ tl«e 13,73 ia identified with the path of 
activities foUoring node 7. The activity emanating from node 7 is then com- 
pleted at time 21.73 and node 8 is realised. This value is recorded for node 
a the first et-e node 8 is realised since the tl« betwen realisatlon.s of 
node 3 .s desired. Fro« the trace. «e see that node 9 is realised next at 
tte 25. 56. this indicates that the branching operation took the branch from 

8 to node 9 for this simulation of the network. Statistics are collected 

on 9 ^ihich was iro aliped ae tte ^ 

one CM© iSio5(5= tkae &c£ivi£ies emanating 

from node 9 „e then scheduled. Activity 1. the upper branch is completed 

first at eiae 28. 79. This cames nod^ 10 to ha realised asd the value of 

28. 79 is recorded as a time of realization of node 10. Since node 10 removes 

-IX activities scheduled to be completed that are incident to node 10. 

s^ctMty 2 is h©l£edc Since ac£lvltv 1 k 

CEivity 1 has been completed , node 10 Is re- 

plse..d by node 13 according to the prescribed network modification. 

^ Branching from node 13 is „ow done. This Is indicated by the trace 
by the attributes associated with the end of activity 


event on node 8 



being those from node 13 to node 8. The time between realization 
of node 8 Is oolU’cted and the current Mme used as tli«* last Mnu’ uiulr H 
was realized. Again the branching process selects llu' acllvltv Irom iumI<* K 
to node 9 and the loop around node 8 is traversed again. On this second 
traversal of the loop activity 1 again was completed before activity 2, and 
the branch from node 13 to node 8 is included in the netowrk. On the third 
traversal of the loop* activity 2 was completed before activity 1 and the 
branch from node 10 to node 8 which involved no time delay is included in 
the network. Finally at time 107*56, node 8 is realized and the branching 
process directs that the activity from node 8 to node 11 be completed. Node 

11 is realized at time 112*56. Since node 11 is an interval node, a value _ 
is calculated which represents the time to go from node 7 to node 11. In 
this case it is 98.78 (112.56 - 13*78). The activity from node 11 to node 

12 Is scheduled and completed at 122.65* At this time node 12 is realized. 
Since node 12 is the sink node of the network and since it only t.^kes one 
realization of the sink node to realize the network, the network is realizt'd 
The value of 122.65 is then recorded as 1 sample of the time to realize node 
12 or equivalently the time to realize the network. This completes one 
simulation run of the network. 

Several comments on the statistics collected on nodes 8, 9, and 10 are 
In order. For run 1 node 8 was realized seven times, therefore, six 
values were calculated for the time between realizations of node 8. For 
node 9, statistics are collected on the time of first realization therefore 
only the value 25*56 is recorded as the appropriate sample on run 1 for 
node 9. For node 10, all realization times are collected since node 10 
is an ALL node. Thus the values 28.79 , 43.98 , 59,54 , 65.39 , 8139 , and 


20 



97.36 fflE-e values iregardiirag the realization of node 10. 

lira this esm&’ijsl'Ss, all 9 difleK’ibutloia types were liitilized to obtain 
sasvipiee! te th® tim<B ' fc© psrfoiif® mt activity c In Figure 8^ a 

trace of ^ additional slmulatioo runs is presented to indicate both the 
variability of the time required to perform an activity and the variability 
involved ;:n th® neti^ork structure diiise to the branching process and the 
netuorlt modification procedures. 


The fiuajt G^l^TS sufctaary report for E:«avsflpla I is presented in Figure 9 
ciu’.,uUtlo-;.'.s ©f the sietnork. The ststistics presented for node 12 
..wpressi?btia ^he vaXusc agg^-ciated 'jjlth the c©t£dpletloa time of the network, 

9^ it jia gasL'ii that 12 hao a probability of one of being 

realized as Th® average tiae to realise node 12 ^as approximately 

33o55 tiL.e uiffiAts urth a s^&,r.dwrd deviation of approssimately 23.43 time 
In tha n<stiymh ms realized in less than 30 time 

and iv; another It r^squired over 148 time units to realize 

the nstmric S ^ - j , . „ 

' oiace in each simulation there 

...- .i.; wif»Kf»»c« sSMtistlc* fcas^d cn Hrst realization and all real- 

Is, etiis siauletloBi ttia Ssi-aneJ-s froa jtsjle J.'i eo node 8 was designated 
vjlti. ■:; ec;i;,;£Gi- 1» StatilsiEict, u!r® aetocatioanj? collected on the number 

of tiroes that branch was t^ksm prior to the of the node on which 

tha Ctatlotfco are «.iUce*a. F.,- node 12 it lo that the average 
nuaber of ttaes the braack fro« node 13 to node 8 was taken prior to the 


re£li^&t i OK of th® ;.ietworh ms 


lii,. some csoSiSg £he brooch wss never 


taken and in at least one st™latlaa the branch was taken 1 times before the 


ns t'cvor'x real i 8 sd . 
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OCRf SIHULATIOM HKOJECT -I BY ALL FfATURfcS 
OATC 5/* 20/ 1970 


♦«FIMAL RESULTS FOR 500 SIMULATIONS^*. . 
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StaeiBtics on node 6 show that the time between the first completion 
of an activity on node b and the time node 6 is realised required almost 7 
time units. For the count statistics listed under node 6, it is seen that 
the branch from node 13 to node 8 was never taken prior to the realization 
of node 6. This is aa expected since that branch follows node 6. Other 


items of interast from ilie final CERTS summary report will now be described. 
The proha!:iUty ..ssociaied with nodes 9 and 10 represent the probability that 
either of tkese nodes wore rsallaad in any siaulcliion run. It is seen that 
branching around the loop froa node 8 occurred in 56.6 percent of the runs. 
Ewe-.^ though atatistlcs for node 10 ere collected for all realizations, the 
probability of realizing node 10 on a simulation run is the probability of 
every realizing node 10, in that simulation run. If It Is desired to obtain 
tr.3 average nuiAer of tiises node 10 was realized, this can be calculated 
from ihv r.uaber of obset vatlons divided by the number of simulation runs 
(697 divUiv.l by im for this «a»ple). The average time of rc-.-tllzIng node 
:0 s.-. a cf.3ulacion run Is the sum of all realization times of node 10 divided 
by the nuafear of tiaas node 10 is realized. This statistic is not an ordinary 
one fc' r.ettfork aodela .since it cosjblnes the tiee of first realization, second 
realization, and so on. Care must be taksjn wht-. using these values. 

Histograms for eact, of the statistics nodes are also presented in Figure 
9. Consider the histogram for node 12 where the lower limit of the second 
cell is 35 and the cell width of each cell is 2. From the data presented, 
is seen tnat In 90 of the 500 simulation runs the realization time for node 
ar.d hence the network was less than 35 time units. In 46 other simulation 
runs the tiine to complste the network was between 35 and 37 time units. Other 
values can be read directly from Figure 9. This example demonstrates that a 
dGa„ ©f data can be obtained from GERTS IIlo 
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P'x ample 2» Analysis and Sequencing of Space Experitnents* 

Thi* performance of experiments in space by a spacecraft crew nro almost 
always severly constrained by time. Many 'exper linen ts are usual ly proposotr 
by the scientific community and of Chose proposed a subset must be chosen 
for a given space mission. The sequencing of these experiments can be an 
important factor in determining the number of experiments that can be com- 
pleted. 

A GERT network of the sequence of experiments will be developed that 
permits Che assessment of the time required to perform the experiments. In 
addition, information regarding the number of experiments that can be com- 
pleted in a specified period of time will be determined* By modifying the 
sequence of experiments (which involves modifying the GERT network) an 
analysis can be performed on proposals for different sequencing procedures. 

It will be assumed that there are three possible outcomes from the 
performance of an experiment: 1) successful completion; 2) failure; and 

3) inconclusive results. If an experiment is successfully completed the 
next experiment in the sequence Is performed. If a failure occurs, the 
experiment is scrubbed and the next experiment is then performed. If the 
results of an experiment are inconclusive, the experiment is repeated n 
times or until a success or failure occurs. The experiment is scrubbed if 
it is tried n times and the results are still Inconclusive. 

The GERT network for a three experiment program is shown in Figure 10. 

Node 2 is the start node and initiates a transfer to node 3. Node 3 represents 
the decision point for the first experiment. If the first experiment is 
successful, the activity from node 3 to node A is traversed. If the first 
experiment falls, then the activity from node 3 to node 19 is taken. The 

* This example was developed by Mr. J. Ignlzlo in a seminar on GERT based on 
Mr. Ignizio's experience (5]. 
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second experiment is started by transferring from node 19 to node 4. rf 
the results of the first experiment are inconclusive, the activity from 
node 3 to node 10 is taken. The output of node 10 is DETKRMINISTIC; and 
both the first experiment is performed again and a signal to node 11 is sent 
to indicate that the first experiment has been performed imce. Thus, ior 
each experiment we will either transfer to node 4 or reach node 13. When 
node 13 is realized three times, the activity from node 13 to node 14 is 
traversed. This activity Is labeled as activity 1 and causes the network 
to be modified by replacing node 3 with node 7. After this occurs when 
node 3 is realized, node 7 Is in the network and a transfer to node 4 is 
caused. A similar discussion holds for experiments 2 and 3. From the net- 
work It is seen that nodes 19, 20, and 21 represent the failure of experiments 
2. and 3. respectively. Nodes 14, 16 and 18 represent the outcomes that 
inconclusive resuli s were obtained after the maximum number of experiments 
could be performed for experiments 1. 2, and 3, respectively. 

Table 1 presents the data for the experimental characteristics to he 
analyzed. In Figui. I], the input for Example 2 is presented. l!.t 
III echo check for the description ot the network is presented in Figures 
12 and 13. Figure 14 presents a summary report describing the results from 
the GERTS III simulation of the sequence proposed for the space experiment 
program. From the output it is seen that experiment 1 failed 15,75% of the 
time and had inconclusive results 3.5% of the time. Therefore, it was success- 
ful 81% of the time. The time to complete experiment 1 is the time to reach 
node 4 of the netwc rk. Figure 14 shows that on the average it took over 46 
time units to read node 4 with a standard deviation of over 18 time units. 

In some Instances jt took as little as 24.5 time units and in others it 
took over 114 time units to complete the experiment. The number of times 
that experiment 1 was completed within given time Intervals is presented in 
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the histogram for node 4. Similar statistical quantities are available for 
the other nodes of the network. 

Another Interesting feature that could be Incorporated Into the m>twork 
model for the sequencing of experiments is the changing of the sequence depend- 
ing on the results of some of the experiments. This would be accomplished 
through the network modification procedures of the GERTS III program. 


Table 1 . Experiment Characteristics 


Experiment 

Probability 

of 

Success 

Probability 

of 

Failure 

Probability 

of 

Inconclusive 

Results 

Allowable 

Numbers 

of 

Repeats 

1 

0.6 

0.1 

0.3 

3 

2 

0.5 

0.1 

0.4 

3 

3 

0.7 

0.1 

0.2 

2 

Experiment 

Mean 

Time 

Minimum 

Time 

Maximum 

Time 

Standard 

Deviation 

1 

10.0 

5.0 

^/\ ^ 

2.0 

2 

20.0 

15,0 

25.0 

1.0 
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15.0 

10.0 

30.0 

3.0 
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